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To promote competition and reduce consumer switching costs in the provision 
of online communications services. 


IN THE SENATE OF THE UNITED STATES 


Mr. Warner (for himself, Mr. Hawley, and Mr. Blumenthal) introduced 
the following bill; which was read twice and referred to the Committee 
on 


A BILL 

To promote competition and reduce consumer switching costs 
in the provision of online communications services. 

1 Be it enacted by the Senate and House of Representa- 

2 tives of the United States of America in Congress assembled, 

3 SECTION 1. SHORT TITLE. 

4 This Act may be cited as the “Augmenting Compat- 

5 ibility and Competition by Enabling Service Switching Act 

6 of 2019” or the “ACCESS Act of 2019”. 

7 SEC. 2. DEFINITIONS. 

8 In this Act: 

9 (1) Commission.— The term “Commission” 


10 


means the Federal Trade Commission. 
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1 (2) Communications provider. —The term 

2 “communications provider” means a consumer-fac- 

3 ing communications and information services pro- 

4 vider. 

5 (3) Competing communications provider.— 

6 The term “competing communications provider”, 

7 with respect to a large communications platform 

8 provider, means another communications provider 

9 offering, or planning to offer, similar products or 

10 services to consumers. 

11 (4) Competing communications service.— 

12 The term “competing communications service”, with 

13 respect to a large communications platform, means 

14 a similar product or service provided by a competing 

15 communications provider. 

16 (5) Custodial third-party agent. —The 

17 term “custodial third-party agent” means an entity 

18 that is duly authorized by a user to interact with a 

19 large communications platform provider on that 

20 user’s behalf to manage the user’s online inter- 

21 actions, content, and account settings. 

22 (6) Interoperability interface. —The term 

23 “interoperability interface” means an electronic 

24 interface maintained by a large communications 

25 platform for purposes of achieving interoperability. 
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(7) Large communications platform. —The 
term “large communications platform” means a 
product or service provided by a communications 
provider that— 

(A) generates income, directly or indirectly, 
from the collection, processing, sale, or sharing 
of user data; and 

(B) has more than 100,000,000 monthly 
active users in the United States. 

(8) Large communications platform pro¬ 
vider. —The term “large communications platform 
provider” means a communications provider that 
provides, manages, or controls a large communica¬ 
tions platform. 

(9) User data.— 

(A) In general. —The term “user data” 
means information that is— 

(i) collected directly by a communica¬ 
tions provider; and 

(ii) linked, or reasonably linkable, to a 
specific person. 

(B) Exclusion. —The term “user data” 
does not include information that is rendered 
unusable, unreadable, de-identified, or 
anonymized. 
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1 SEC. 3. PORTABILITY. 

2 (a) General Duty of Large Communications 

3 Platform Providers. —A large communications plat- 

4 form provider shall, for each large communications plat- 

5 form it operates, maintain a set of transparent, third- 

6 party-accessible interfaces (including application program- 

7 ming interfaces) to initiate the secure transfer of user data 

8 to a user, or to a competing communications provider act- 

9 ing at the direction of a user, in a structured, commonly 

10 used, and machine-readable format. 

11 (b) General Duty of Competing Communica- 

12 tions Providers.—A competing communications pro- 

13 vider that receives ported user data from a large conunu- 

14 nications platform provider shall reasonably secure any 

15 user data it acquires. 

16 (c) Exemption for Certain Services.—T he obli- 

17 gations under this section shall not apply to a product or 

18 service by which a large communications platform provider 

19 does not generate any income or other compensation, di- 

20 rectly or indirectly, from collecting, using, or sharing user 

21 data. 

22 SEC. 4. INTEROPERABILITY. 

23 (a) General Duty of Large Communications 

24 Platform Providers.—A large communications plat- 

25 form provider shall, for each large communications plat- 

26 form it operates, maintain a set of transparent, third- 
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1 party-accessible interfaces (including application program- 

2 ming interfaces) to facilitate and maintain technically 

3 compatible, interoperable communications with a user of 

4 a competing communications provider. 

5 (b) Gene ral Duty of Competing Communica- 

6 tions Providers.—A competing communications pro- 

7 vider that accesses an interoperability interface of a large 

8 communications platform provider shall reasonably secure 

9 any user data it acquires, processes, or transmits. 

10 (c) Interoperability Obligations for Large 

11 Communications Platform Providers.— 

12 (1) In gene ral .—I n order to achieve inter- 

13 operability under subsection (a), a large communica- 

14 tions platform provider shall fulfill the duties under 

15 paragraphs (2) through (6) of this subsection. 

16 (2) Non-discrimination.— 

17 (A) In general. —A large conununica- 

18 tions platform provider shall facilitate and 

19 maintain interoperability with competing com- 

20 munications services for each of its large com- 

21 munications platforms through an interoper- 

22 ability interface, based on fair, reasonable, and 

23 nondiscriminatory terms. 

24 (B) Reasonable thresholds, access 


25 


STANDARDS, AND FEES.— 
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(i) In general. —A large commu¬ 
nications platform provider may establish 
reasonable thresholds related to the fre¬ 
quency, nature, and volume of requests by 
a competing communications provider to 
access resources maintained by the large 
communications platform provider, beyond 
which the large communications platform 
provider may assess a reasonable fee for 
such access. 

(ii) Usage expectations. —A large 
communications platform provider may es¬ 
tablish fair, reasonable, and nondiscrim- 
inatory usage expectations to govern access 
by competing communications providers, 
including fees or penalties for providers 
that exceed those usage expectations. 

(iii) Limitation on fees and usage 
expectations. —Any fees, penalties, or 
usage expectations assessed under clauses 
(i) and (ii) shall be reasonably proportional 
to the cost, complexity, and risk to the 
large communications platform provider of 
providing such access. 
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(iv) Notice.—A large communica¬ 
tions platform provider shall provide public 
notice of any fees, penalties, or usage ex¬ 
pectations that may be established under 
clauses (i) and (ii), including reasonable 
advance notice of any changes. 

(v) Security and privacy stand¬ 
ards.—A large communications platform 
provider shall, consistent with industry 
best practices, set privacy and security 
standards for access by competing commu¬ 
nications services to the extent reasonably 
necessary to address a threat to the large 
communications platform or user data, and 
shall report any suspected violations of 
those standards to the Commission. 

(C) Prohibited changes to inter¬ 
faces.—A change to an interoperability inter¬ 
face or terms of use made with the purpose, or 
substantial effect, of unreasonably denying ac¬ 
cess or undermining interoperability for com¬ 
peting communications sendees shall be consid¬ 
ered a violation of the duty under subparagraph 
(A) to facilitate and maintain interoperability 
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based on fair, reasonable, and nondiscrim- 
inatory terms. 

(3) Functional equiv ale nce.— A large com¬ 
munications platform provider that maintains inter¬ 
operability between its own large communications 
platform and other products, services, or affiliated 
offerings of such provider shall offer a functionally 
equivalent version of that interface to competing 
communications services. 

(4) Interface information.— 

(A) In general. —Not later than 120 
days after the date of enactment of this Act, a 
large communications platform provider shall 
disclose to competing communications providers 
complete and accurate documentation describ¬ 
ing access to the interoperability interface re¬ 
quired under this section. 

(B) Contents. —The documentation re¬ 
quired under subparagraph (A)— 

(i) is limited to interface documenta¬ 
tion necessary to achieve development and 
operation of interoperable products and 
services; and 
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1 (ii) does not require the disclosure of 

2 the source code of a large communications 

3 platform. 

4 (5) Notice of c ha nges.—A large communica- 

5 tions platform provider shall provide reasonable ad- 

6 vance notice to a competing communications pro- 

7 vicler, which may be provided through public notice, 

8 of any change to an interoperability interface main- 

9 tained by the large communications platform pro- 

10 vider that will affect the interoperability of a com- 

11 peting communications service. 

12 (6) Non-commercialization by a large 

13 COMMUNICATIONS PLATFORM PROVIDER.—A large 

14 communications platform provider may not collect, 

15 use, or share user data obtained from a competing 

16 communications service through the interoperability 

17 interface except for the purposes of safeguarding the 

18 privacy and security of such information or main- 

19 taining interoperability of services. 

20 (d) Non-commercialization by a Competing 

21 Communications Provider.—A competing communica- 

22 tions provider that accesses an interoperability interface 

23 may not collect, use, or share user data obtained from a 

24 large communications platform provider through the inter- 

25 operability interface except for the purposes of safe- 
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1 guarding the privacy and security of such information or 

2 maintaining interoperability of services. 

3 (e) Exemption for Certain Services. —The obli- 

4 gations under this section shall not apply to a product or 

5 service by which a large communications platform provider 

6 does not generate any income or other compensation, di- 

7 rectly or indirectly, from collecting, using, or sharing user 

8 data. 

9 SEC. 5. DELEGATABILITY. 

10 (a) General Duty of Large Communications 

11 Platform Providers.— A large communications plat- 

12 form provider shall maintain a set of transparent third- 

13 party-accessible interfaces by which a user may delegate 

14 a custodial third-party agent to manage the user’s online 

15 interactions, content, and account settings on a large com- 

16 muni cations platform on the same terms as a user. 

17 (b) Authentication. —Not later than 180 days 

18 after the date of enactment of this Act, the Commission 

19 shall establish rules and procedures to facilitate a custo- 

20 dial third-party agent’s ability to obtain access pursuant 

21 to subsection (a) in a way that ensures that a request for 

22 access on behalf of a user is a verifiable request. 

23 (c) Registration With the Commission.—A cus- 

24 todial third-party agent shall register with the Commission 
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1 as a condition of, and prior to, accessing an interface de- 

2 scribed in subsection (a). 

3 (d) Deregistration by the Commission.—T he 

4 Commission shall establish rules and procedures to 

5 deregister a custodial third-party agent that the Conunis- 

6 sion determines has violated the duties established in this 

7 section. 

8 (e) Revocation of Access Rights.—A large com- 

9 munications platform provider may revoke or deny access 

10 for any custodial third-party agent that— 

11 (1) fails to register with the Commission; or 

12 (2) repeatedly facilitates fraudulent or mali- 

13 cious activity. 

14 (f) Duties of a Custodial Third-party 

15 Agent. —A custodial third-party agent— 

16 (1) shall reasonably safeguard the privacy and 

17 security of user data provided to it by a user, or 

18 accessed on a user’s behalf; 

19 (2) shall not access or manage a user’s online 

20 interactions, content, or account settings in any way 

21 that— 

22 (A) will benefit the custodial third-party 

23 agent to the detriment of the user; 

24 (B) will result in any reasonably foresee- 


25 


able harm to the user; or 
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1 (C) is inconsistent with the directions or 

2 reasonable expectations of the user; and 

3 (3) shall not collect, use, or share any user data 

4 provided to it by a user, or accessed on a user’s be- 

5 half, for the commercial benefit of the custodial 

6 third-party agent. 

7 (g) Fees.—A custodial third-party agent may charge 

8 users a fee for the provision of the products or services 

9 described in subsection (a). 

10 (li) Extent of Access Rights. —Nothing in this 

11 section shall be construed to confer greater rights of ac- 

12 cess for a custodial third-party agent to a large conunu- 

13 nications platform than are accessible to a user. 

14 SEC. 6. IMPLEMENTATION AND ENFORCEMENT. 

15 (a) Regulations. —Not later than 1 year after the 

16 date of enactment of this Act, the Commission shall pro- 

17 nmlgate regulations to implement section 4(c)(2)(B)(v) 

18 and subsections (b), (c), and (d) of section 5. 

19 (b) Authentication. —Not later than 180 days 

20 after the date of enactment of this Act, the Commission, 

21 in consultation with relevant industry stakeholders, shall 

22 establish rules and procedures to facilitate the verification 

23 of the validity of requests from users and competing com- 

24 munications providers to obtain user data under sections 

25 3(a) and 4(a). 
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1 (c) Technical Standards. —Not later than 180 

2 days after the date of enactment of this Act, the Director 

3 of the National Institute of Standards and Technology 

4 shall develop and publish model technical standards by 

5 which to make interoperable popular classes of commn- 

6 nications or information sendees, including— 

7 (1) online messaging; 

8 (2) multimedia sharing; and 

9 (3) social networking. 

10 (d) Compliance Assessment. —The Commission 

11 shall regularly assess compliance by large communications 

12 platform providers with the provisions of this Act. 

13 (e) Complaints. —The Commission shall establish 

14 procedures under which a user, a large communications 

15 platform provider, a competing communications provider, 

16 and a custodial third-party agent may file a complaint al- 

17 leging that a large communications platform provider, a 

18 competing communication provider, or a custodial third- 

19 party agent has violated this Act. 

20 (f) Enforcement. — 

21 (1) Unfair or deceptive acts or prac- 

22 tices. —A violation of this Act, or regulations en- 

23 acted pursuant to this Act, shall be treated as a vio- 

24 lation of a rule defining an unfair or deceptive act 
or practice prescribed under section 18(a)(1)(B) of 
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the Federal Trade Commission Act (15 U.S.C. 

57a(a)(l)(B)). 

(2) PtJWERS OF COMMISSION.— 

(A) In general. —Except as provided in 
subparagraph (C), the Commission shall enforce 
this Act in the same manner, by the same 
means, and with the same jurisdiction, powers, 
and duties as though all applicable terms and 
provisions of the Federal Trade Commission 
Act (15 U.S.C. 41 et seq.) were incorporated 
into and made a part of this Act. 

(B) Privileges and immunities.— Ex¬ 
cept as provided in subparagraph (C), any per¬ 
son who violates section 3 shall be subject to 
the penalties and entitled to the privileges and 
immunities provided in the Federal Trade Com¬ 
mission Act (15 U.S.C. 41 et seq.). 

(C) Nonprofit organ iza tions and com¬ 
mon carriers.— Notwithstanding section 4 or 
5(a)(2) of the Federal Trade Commission Act 
(15 U.S.C. 44, 45(a)(2)) or any jurisdictional 
limitation of the Commission, the Commission 
shall also enforce this Act, in the same manner 
provided in subparagraphs (A) and (B) of this 
paragraph, with respect to common carriers 


25 
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1 subject to the Communications Act of 1934 (47 

2 U.S.C. 151 et seq.). 

3 (D) Fines. —In assessing any fine for a 

4 violation of this Act, the Commission shall con- 

5 sicler each individual user affected by a violation 

6 of this Act as an individual violation. 

7 (g) Reliance on Open Standards.—-A ny large 

8 communications platform provider that establishes and 

9 maintains interoperability through an open standard es- 

10 tablislied under subsection (c) shall be entitled to a rebut- 

11 table presumption of providing access on fair, reasonable, 

12 and nondiscriminatory terms. 

13 (li) Preemption.—T he provisions of this Act shall 

14 preempt any State law only to the extent that such State 

15 law is inconsistent with the provisions of this Act. 

16 (i) Effective Date. —This Act shall take effect on 

17 the date on which the Commission promulgates regula- 

18 tions under subsection (a). 

19 SEC. 7. RELATION TO OTHER LAWS. 

20 Nothing in this Act shall be construed to modify, 

21 limit, or supersede the operation of any privacy or security 

22 provision in— 

23 (1) section 552a of title 5, United States Code 

24 (commonly known as the “Privacy Act of 1974”); 
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1 (2) the Right to Financial Privacy Act of 1978 

2 (12 IT.S.C. 3401 et seq.); 

3 (3) the Fair Credit Reporting Act (15 IT.S.C. 

4 1681 et seq.); 

5 (4) the Fair Debt Collection Practices Act (15 

6 U.S.C. 1692 et seq.); 

7 (5) the Children’s Online Privacy Protection 

8 Act of 1998 (15 IT.S.C. 6501 et seq.); 

9 (6) title Y of the Gramm-Leach-Bliley Act (15 

10 IT.S.C. 6801 et seq.); 

11 (7) chapters 119, 123, and 206 of title 18, 

12 United States Code; 

13 (8) section 444 of the General Education Provi- 

14 sions Act (20 IT.S.C. 1232g) (commonly referred to 

15 as the “Family Educational Rights and Privacy Act 

16 of 1974”); 

17 (9) section 445 of the General Education Provi- 

18 sions Act (20 IT.S.C. 12321i); 

19 (10) the Privacy Protection Act of 1980 (42 

20 IT.S.C. 2000aa et seq.); 

21 (11) the regulations promulgated under section 

22 264(c) of the Health Insurance Portability and Ac- 

23 countability Act of 1996 (42 IT.S.C. 1320d-2 note), 

24 as those regulations relate to— 
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1 (A) a person described in section 1172(a) 

2 of the Social Security Act (42 U.S.C. 1320d- 

3 1(a)); or 

4 (B) transactions referred to in section 

5 1173(a)(1) of the Social Security Act (42 

6 U.S.C. 1320d-2(a)(l)) ; 

7 (12) the Communications Assistance for Law 

8 Enforcement Act (47 U.S.C. 1001 et seq.); 

9 (13) sections 222 and 227 of the Communica- 

10 tions Act of 1934 (47 U.S.C. 222, 227); or 

11 (14) any other privacy or security provision of 

12 Federal law. 



